Detect Beacon Powerful (Include CobatStrike 4.10 Aha~)
☆21Oct 18, 2024Updated last year
Alternatives and similar repositories for DetectCobaltStrike
Users that are interested in DetectCobaltStrike are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆15Jul 13, 2024Updated 2 years ago
- Help red teams find opsec processes during engagements☆44Dec 7, 2024Updated last year
- CobaltStrike4.5 Sleeve解密文件，搬砖加一点点修改, 仅作备份使用.☆33Jun 17, 2022Updated 4 years ago
- ☆24Dec 18, 2022Updated 3 years ago
- 小玩具，用来快速检测银狐家族恶意程序，和部分RAT/C2产品☆71Jan 7, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Cobalt Strike Get clipboard plugin☆15Aug 11, 2023Updated 2 years ago
- ☆12Feb 28, 2023Updated 3 years ago
- ☆62Apr 4, 2024Updated 2 years ago
- Language extension for Crystal Palace Specification files☆15Jun 6, 2026Updated last month
- A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader☆72Mar 6, 2026Updated 4 months ago
- A VBA implementation of the RunPE technique or how to bypass application whitelisting.☆14Dec 30, 2018Updated 7 years ago
- Robust Cobalt Strike shellcode loader with multiple advanced evasion features☆206Apr 21, 2025Updated last year
- Cobalt Strike Beacon Object File (BOF) that uses RegConnectRegistryA + RegOpenKeyExA API to dump registry hives on remote computer☆18Mar 4, 2023Updated 3 years ago
- A tool to assist DLL hijacking via the Havoc GUI☆14Jan 9, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆44Oct 9, 2023Updated 2 years ago
- CVE-2026-0827 PoC☆19Apr 16, 2026Updated 3 months ago
- LibPicoManager is a unified PICO management framework that provides centralized control over PICOs in memory, enabling dynamic code loadi…☆43Dec 1, 2025Updated 7 months ago
- Run native PE or .NET executables entirely in-memory. Build the loader as an .exe or .dll—DllMain is Cobalt Strike UDRL-compatible☆272Jun 18, 2025Updated last year
- Stealthy .NET assembly loading using AssemblyNative::LoadFromBuffer☆58Mar 22, 2026Updated 4 months ago
- ☆101Sep 14, 2022Updated 3 years ago
- Cobalt Strike beacon parser and crawler☆20Dec 14, 2025Updated 7 months ago
- ☆27Apr 24, 2025Updated last year
- SharpReg is a simple code set to interact with the Remote Registry service api and is compatible with Cobalt Strike.☆27Apr 12, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Lateral movement with DCOM DLL hijacking☆182Jul 4, 2025Updated last year
- A simple Sleepmask BOF example☆176Nov 24, 2025Updated 8 months ago
- An insecurely implemented and installed Windows service for emulating elevation of privileges vulnerabilities☆68Aug 25, 2022Updated 3 years ago
- Hardware Spoofing & VirtualBox-Hardening x64 Bootkit☆21Dec 15, 2022Updated 3 years ago
- Advanced Proxy Switcher & Header Modifier☆27May 23, 2026Updated 2 months ago
- Seven different DLL injection techniques in one single project.☆12May 19, 2020Updated 6 years ago
- BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)☆219Feb 6, 2025Updated last year
- A tool written in golang which compress using UPX and patch it with the provided PE file to make "UPX -d" flag impossible to decompress a…☆30Jan 2, 2025Updated last year
- Python based tool for generating Shellcode from PIC C☆43Nov 6, 2025Updated 8 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- 复现《EDR的梦魇：Storm-0978使用新型内核注入技术“Step Bear”》☆164Oct 27, 2024Updated last year
- windows 日志检测工具☆21Jul 3, 2023Updated 3 years ago
- Port of Cobalt Strike's Process Inject Kit☆194Dec 1, 2024Updated last year
- Self Cleanup in post-ex job☆60Sep 10, 2024Updated last year
- Take a screenshot without injection for Cobalt Strike☆205Jun 7, 2023Updated 3 years ago
- 重构Beacon☆166Aug 19, 2024Updated last year
- time-based user enum via Basic Auth in Azure against Autodiscover☆35Oct 3, 2024Updated last year